Skip to content
Book a risk assessment

Fix First.

Known weaknesses fixed before anyone can use them.

Every onboarded laptop and server is checked continuously. Weaknesses are fixed in the order attackers would use them, not the order a severity score suggests, with deadlines aligned to the Essential Eight.

Price
$3 per device, monthly
Covers
Every onboarded laptop and server
Deadlines
Aligned to the Essential Eight
Northbank Advisory · 8 open weaknessesExample
  1. 01
    Remote code flaw in the VPN gateway
    Exploited now · Internet-facing
    Score 9.8
    48 hours
  2. 02
    Browser flaw on 43 laptops
    Exploited now · Every staff member
    Score 8.8
    48 hours
  3. 03
    Privilege flaw on the archive file server
    Exploited now · Crown jewel
    Score 7.8
    2 weeks
  4. 04
    PDF reader flaw on 40 laptops
    Exploit published · Most staff
    Score 7.8
    2 weeks
  5. 05
    Accounting system add-in flaw
    No known exploit · Crown jewel
    Score 7.5
    2 weeks
  6. 06
    Printer firmware flaw
    No known exploit · Office network only
    Score 9.1
    1 month
  7. 07
    Old Java runtime on 2 laptops
    No known exploit · 2 devices
    Score 9.0
    1 month
  8. 08
    Media player flaw on 3 laptops
    No known exploit · 3 devices
    Score 6.5
    Next cycle

Fix First puts the two flaws attackers are using right now at the top, then whatever touches a crown jewel.
How the order is set

Three questions decide what gets fixed first.

A severity score says how bad a flaw could be. It doesn't say whether anyone is using it, or whether it touches what matters to you.

01

Is it being used in attacks?

Flaws on public lists of actively exploited weaknesses jump the queue, whatever their score.

02

Can it be reached from the internet?

A flaw on your VPN gateway is closer to an attacker than one on a printer in the back office.

03

Does it touch a crown jewel?

Anything on the systems Groundwork marked as crown jewels moves up. The severity score breaks ties.

Deadlines

Every weakness gets a deadline the day it's found.

Our deadlines meet or beat the Essential Eight patching timeframes. Overdue items show up in your portal and your monthly report.

48 hours

Exploited and exposed

Actively exploited, and reachable from the internet or on every laptop.

2 weeks

Exploited, or on a crown jewel

Browsers, office apps, PDF readers, and anything on a crown jewel.

1 month

Everything else that matters

Operating systems and other apps with no known exploit.

Next cycle

Low risk

Rarely used software with no exploit and no exposure. Often removed instead.

Advisories

"Does this affect us?" Answered within hours.

When a big flaw makes the news, you don't have to ask. We check it against every device we cover and post the answer in your portal.

Advisories · Northbank AdvisoryExample
Tue 09:10 · New advisoryChecked 09:40
Critical flaw in a popular remote access product
Not affected. You don't run it on any of your 45 laptops or 2 servers.
Thu 14:05 · New advisoryChecked 14:50
Flaw in a file-sharing component, exploited in the wild
Affected: the archive file server. Fix scheduled for 7pm tonight, after hours. Sam has approved.
Proof

Fewer open weaknesses every month, and none overdue.

The number that matters isn't how many flaws exist. It's how many attackers could use today, and how long they stay open.

Open weaknesses at month end · Northbank AdvisoryExample

Open weaknesses fell from 214 in May to 39 in October.

Overdue: 0Exploited and open: 0
Price

$3 per device a month, servers included.

In this example, Northbank's 45 laptops and 2 servers come to $141 a month. On Microsoft 365 Business Premium it uses the agent Device Shield already installed.

Works well withDevice ShieldHardened

Groundwork finds your crown jewels. Fix First protects them first.

Book Groundwork, and your fix order is set from your answers.

Book Groundwork